Librería Portfolio

Become a proficient Microsoft Azure solutions architect

Azure certifications are critical to the millions of IT professionals Microsoft has certified as MCSE and MCSA in Windows Server in the last 20 years. All of these professionals need to certify in key Azure exams to stay current and advance in their careers. Exams AZ-303 and AZ-304 are the key solutions architect exams that experienced Windows professionals will find most useful at the intermediate and advanced points of their careers.

Microsoft Azure Architect Technologies and Design Complete Study Guide Exams AZ-303 and AZ-304 covers the two critical Microsoft Azure exams that intermediate and advanced Microsoft IT professionals will need to show proficiency as their organizations move to the Azure cloud.

Understand Azure
Set up your Microsoft Cloud network
Solve real-world problems
Get the confidence to pass the exam

By learning all of these things plus using the Study Guide review questions and practice exams, the reader will be ready to take the exam and perform the job with confidence.




Table of contents

Introduction xxi

Assessment Test xxxix

Chapter 1 Gaining the Azure Solutions Architect Expert Certification 1

The Journey to Certification 3

A Strategy to Pass the Azure Exams 5

Use Azure Daily 5

Read Azure Articles, Keeping Yourself Current 6

Recognize Azure Product Names, Features, and Functionalities 9

Strive for a Deep Knowledge of a Few, Some Knowledge of Many, and a Basic Knowledge of All 10

An Introduction to "Must-Knowö Azure Features 12

Azure Active Directory and Security 12

Networking 13

Azure Virtual Machines 15

Azure App Service 16

Azure Functions 18

API Management 19

Azure Monitor 20

Azure SQL 22

Azure Cosmos DB 24

Azure Storage 25

Service Bus 28

Site Recovery 30

Azure Bastion 32

Summary 32

Exam Essentials 33

Key Terms 34

Review Questions 35

Chapter 2 Security and Identity 39

Azure Active Directory 40

Add a Custom Domain to Azure Active Directory 44

AAD Connect 49

Connect Health 51

Directory Objects 52

Single Sign-On 52

B2B Collaboration 53

Self-Service Password 54

Application Proxy 54

Service Level Agreement 56

Identity Protection 57

Conditional Access 59

Multifactor Authentication 66

Privileged Identity Management 74

Managed Identities 75

Azure AD Domain Services 76

Role-Based Access Control 78

How to Control Who or What Has Access 84

How to Provide Permissions to Resources 85

How Are the Permissions to Resources Controlled? 87

Custom Roles 87

Hardware and Network Security 92

Microsoft Trust Center 93

Security Center 93

Azure Network Security 98

Application Gateway/WAF 98

Azure DDoS Protection 99

Azure Confidential Computing 99

Azure Security Products and Techniques 102

Shared Access Signature 102

Azure Key Vault 103

Easy Auth 105

Summary 106

Exam Essentials 106

Review Questions 108

Chapter 3 Networking 111

Microsoft's Global Network 112

Overview of Hybrid Networks 114

Azure Virtual Network 115

Azure Virtual Networking 117

Regions 117

Key Features and Capabilities 127

Network Security 168

Traffic Filtering with NSG, ASG, and NVA 169

Application Gateway/WAF 174

IP Restrictions 180

Network Map and Topology 183

Using Azure DNS 184

Azure-Provided DNS 187

Hybrid Azure Networking 190

ExpressRoute 190

Site-to-Site VPN Gateway 192

Additional Azure Networking Products 201

Application Gateway 202

Hosting Multiple Websites 206

Azure Load Balancer 211

Azure Front Door 214

Azure Content Delivery Network 215

Traffic Manager 217

Azure Relay/Hybrid Connection Manager 218

Key Terms 220

Summary 221

Exam Essentials 222

Review Questions 224

Chapter 4 Compute 227

An Overview of Compute (Hosting Model) 229

Cloud Service Models 229

How to Choose the Right Hosting Model 231

Architectural Styles, Principles, and Patterns 234

Azure Compute Best Practices 237

Azure Container Instances 239

OS Virtualization, Containers, and Images 241

Container Groups and Multicontainers 243

Azure Virtual Machines 256

Creating Azure Virtual Machines 259

Managing Azure Virtual Machines 271

Azure App Services 298

Web Apps 301

Web App for Containers (Linux) 306

App Service Environments 308

Azure WebJobs 309

Azure Batch and HPC 312

Storage 316

Marketplace 316

Azure Functions 317

Hosting Plans 319

Triggers and Bindings 320

Runtime Versions 326

Supported Programming Languages 326

Service Fabric 328

Clusters and Nodes 330

Architecture 331

Best-Practice Scenarios 332

Azure Integration 335

Azure Kubernetes Service 336

Kubernetes vs. AKS 336

Clusters, Nodes, and Pods 338

Development and Deployment 338

Maintaining and Scaling 342

Cloud Services 344

Windows Virtual Desktop 345

Summary 346

Key Terms 347

Exam Essentials 348

Review Questions 350

Chapter 5 Data and Storage 355

RDBMS, OLTP, OLAP, and ETL 357

Big Data/NoSQL 358

Choosing the Right Data Storage Solution 359

Document Databases 360

Key/Value Pairs 361

Graph Databases 362

Object Storage 363

Relational Database Management System 363

Search Engine Databases 365

Data Analytics/Data Warehouse 365

Shared Files 373

Azure Data Store 377

Azure SQL Database 382

Other Azure Data Stores 420

Azure Storage 424

Zone Replication 434

Data Backup, Migration, and Retention 437

Securing Azure Data 443

Summary 451

Exam Essentials 451

Key Terms 452

Review Questions 454

Chapter 6 Hybrid, Compliance, and Messaging 457

Hybrid Solutions 458

Hybrid Security 459

Hybrid Networking 460

Hybrid Computing 462

Hybrid Data Solutions 463

Azure Cloud Compliance Techniques 463

Compliance and Governance 464

Security 472

Resiliency and Reliability 474

Privacy 475

Security Center 478

Microsoft Cloud App Security 483

Azure Messaging Services 484

Event vs. Messaging 485

How to Choose the Right Messaging Service 485

Messaging Patterns 487

Event Hubs 492

Service Bus 496

Azure Storage Queue 498

Event Grid 499

Logic Apps 503

Notification Hubs 505

Summary 505

Exam Essentials 506

Key Terms 506

Review Questions 508

Chapter 7 Developing for the Cloud 511

Architectural Styles, Principles, and Patterns 512

Architectural Styles 513

Design Principles 515

Cloud Design Patterns 517

An Introduction to Coding for the Cloud 523

Triggering a Background Job 523

Connecting to Regional/Global Database Instances 524

Working with the Azure Queue Storage SDK 524

Forms, Certificate, Windows, MFA, Open

Standard, Managed Identities, and Service

Principle Authentication 525

Reading Encrypted Data from a Database 531

IDEs and Source Code Re